Skip to content

ci: consolidate Dependabot skip into reusable flags-board workflow#61733

Merged
turnipdabeets merged 1 commit into
masterfrom
ci/consolidate-dependabot-flags-skip
Jun 4, 2026
Merged

ci: consolidate Dependabot skip into reusable flags-board workflow#61733
turnipdabeets merged 1 commit into
masterfrom
ci/consolidate-dependabot-flags-skip

Conversation

@turnipdabeets

Copy link
Copy Markdown
Contributor

What

The Dependabot skip for the call-flags-project / add-to-project-board check is now handled centrally in the reusable workflow — PostHog/.github#52 (merged). This repo was carrying the same github.actor != 'dependabot[bot]' conditional inline.

This PR consolidates it:

  • Bumps the flags-project-board.yml pin to the merged SHA 69336b569d22687f8982eea6ff7d450a885cda05.
  • Drops the now-redundant inline Dependabot guard.

Why it's safe

  • No behavior change — Dependabot PRs are still skipped, just by the reusable workflow instead of here.
  • The pin bump pulls in only that one workflow change (verified via the d8b55d05...69336b56 compare — the sole diff to flags-project-board.yml is the Dependabot skip).
  • Fork guard (where present) is left untouched.

Background

The board's GitHub App token step hard-fails in Dependabot's restricted secret context (The 'client-id'... must be set to a non-empty string), which is why the check was red on every dependency bump until the skip was added.

🤖 Generated with Claude Code

@greptile-apps

greptile-apps Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

Reviews (1): Last reviewed commit: "ci: consolidate Dependabot skip into reu..." | Re-trigger Greptile

@turnipdabeets turnipdabeets force-pushed the ci/consolidate-dependabot-flags-skip branch from 179985a to db53e5f Compare June 4, 2026 20:10
The Dependabot skip for the feature flags project board is now handled
centrally in the reusable workflow (PostHog/.github#52). Bump the pin to
that merged SHA and drop the redundant inline `github.actor !=
'dependabot[bot]'` guard so the conditional lives in one place.

No behavior change: Dependabot PRs are still skipped (now upstream), and
the pin bump pulls in only that single workflow change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@turnipdabeets turnipdabeets force-pushed the ci/consolidate-dependabot-flags-skip branch from db53e5f to 4d00ef5 Compare June 4, 2026 20:10
@turnipdabeets turnipdabeets requested a review from a team June 4, 2026 20:18
@turnipdabeets turnipdabeets enabled auto-merge (squash) June 4, 2026 20:18
@turnipdabeets turnipdabeets merged commit 0369ba6 into master Jun 4, 2026
154 checks passed
@turnipdabeets turnipdabeets deleted the ci/consolidate-dependabot-flags-skip branch June 4, 2026 21:10
@deployment-status-posthog

deployment-status-posthog Bot commented Jun 4, 2026

Copy link
Copy Markdown

Deploy status

Environment Status Deployed At Workflow
dev ✅ Deployed 2026-06-04 22:10 UTC Run
prod-us ✅ Deployed 2026-06-04 22:41 UTC Run
prod-eu ✅ Deployed 2026-06-04 22:43 UTC Run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants